This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa
File:                     34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa (raw, json)
Hash identifier:          ekxkEL5mHeSddQcV572cEg0Z+t+fDlJQgQIWQEr+XOo=
Subject key identifier:   B8:AB:2A:42:D8:86:19:52:34:17:7C:47:E5:87:E7:A5:4D:22:DB:A8
Certificate issuer:       /CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Certificate serial:       50CA26CC13DC77DD8773080ECE9DFEAA97860222
Authority key identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa
Signing time:             Sat 20 Sep 2025 01:26:11 +0000
ROA not before:           Sat 20 Sep 2025 01:21:11 +0000
ROA not after:            Sat 19 Sep 2026 01:26:11 +0000
asID:                     268054
IP address blocks:        45.167.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ca:26:cc:13:dc:77:dd:87:73:08:0e:ce:9d:fe:aa:97:86:02:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
        Validity
            Not Before: Sep 20 01:21:11 2025 GMT
            Not After : Sep 19 01:26:11 2026 GMT
        Subject: CN=B8AB2A42D886195234177C47E587E7A54D22DBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:0e:30:59:bc:13:cf:98:71:8e:d5:a4:aa:
                    94:24:05:8b:b7:63:3f:bf:38:6b:2e:30:5f:c0:b7:
                    6e:86:2f:82:02:4c:af:80:1e:0c:e0:ea:31:29:92:
                    c2:b8:b5:21:3a:30:0d:6a:9a:84:d5:86:3d:59:7a:
                    20:b1:a7:13:27:23:d6:4f:f8:e1:4d:1f:2d:53:05:
                    52:c5:02:7e:d1:ed:73:d6:ff:cd:05:43:14:4d:27:
                    a5:57:e9:ef:4a:db:f8:49:34:95:bd:fd:b3:6f:84:
                    b7:87:1b:4c:74:55:b6:29:75:a9:b7:49:9e:3d:37:
                    a9:e3:38:bf:94:cd:13:bf:57:69:ed:4c:42:80:6e:
                    83:87:ad:fa:2b:38:b4:6d:de:b8:4f:70:dd:cd:bc:
                    5c:a8:92:44:e4:cc:0a:52:be:22:e9:f1:85:56:a4:
                    a9:db:18:5f:ee:5a:f6:7f:f3:14:62:99:e2:a3:47:
                    a3:77:4d:73:af:2c:65:e4:5f:a1:1d:fb:40:2f:b2:
                    8d:3c:a0:55:a5:94:f0:32:8d:28:47:c9:b6:47:68:
                    77:82:06:27:c7:fd:e2:67:4a:06:13:65:07:ea:73:
                    01:06:59:09:6c:a2:2d:7e:cc:03:62:1e:bd:78:83:
                    84:67:fa:b7:02:9c:8d:9b:88:c4:20:2b:89:c3:86:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AB:2A:42:D8:86:19:52:34:17:7C:47:E5:87:E7:A5:4D:22:DB:A8
            X509v3 Authority Key Identifier:
                keyid:A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:4d:2c:67:2f:da:c5:ac:58:d0:9e:2f:2b:0a:d7:77:0c:
         b0:f8:ed:80:52:5e:47:2a:8b:bf:e2:b8:80:37:1c:e9:43:b9:
         84:cf:32:eb:df:fa:f1:5c:19:45:fa:cb:e8:3c:3b:fa:e3:7d:
         25:93:7a:51:90:d5:a5:ae:42:59:da:74:dd:82:8c:64:4f:2b:
         e1:b6:88:ba:66:10:20:6c:a7:1f:c6:ec:85:68:b3:df:af:bf:
         5e:95:70:68:0f:6e:37:2c:dd:44:1d:bb:fb:8d:33:29:3d:3e:
         72:4b:69:02:5c:84:00:68:e8:59:cd:31:8a:8c:bc:7a:a8:33:
         5f:48:4d:89:33:23:30:0a:1c:c1:c9:74:ee:0a:38:c3:3c:ea:
         fe:24:e7:e8:cf:b5:2e:92:a5:a7:59:12:cf:df:1a:76:96:d6:
         11:43:a7:17:d1:1a:18:29:40:ef:09:85:5b:9a:7b:16:fe:9c:
         4e:16:00:22:61:be:d1:a4:66:87:b4:d8:e7:72:60:78:b6:57:
         48:7c:a8:6e:7d:ad:6d:45:98:1c:69:3d:76:1c:65:07:a2:17:
         4f:a0:cc:12:b0:e5:4d:41:ec:80:25:07:e0:50:29:e2:9a:5d:
         70:f1:90:d7:a5:12:41:da:07:6e:f4:90:d0:50:c4:65:d1:a3:
         9c:a3:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----